When Machines enforce the law: Securing the next generation of Digital Officers

As law enforcement accelerates its digital transformation, artificial intelligence, automation, and machine identities are reshaping policing—from predictive crime models to automated surveillance and digital evidence systems. These “non-human actors” increase efficiency but also introduce new risks: security vulnerabilities, data protection challenges, and accountability concerns for systems acting without direct human oversight. Agencies must now balance AI-driven efficiency with compliance under GDPR, Swedish data protection laws, and principles of transparency and trust.


AI’s growing role in Policing

AI is indispensable in modern law enforcement, enabling faster investigations, pattern recognition, and automated intelligence processing. But reliance on AI brings dual risks: compromised or biased systems can erode civil liberties or influence critical decisions. European agencies now face a key challenge: not whether to deploy AI, but how to secure, govern, and justify its actions under legal and public scrutiny.


Machine Identities: The invisible security layer

Every automated system relies on a machine identity—a digital credential authenticating algorithms, bots, and systems. In many agencies, these non-human identities now outnumber human officers, forming a critical but often overlooked part of the security perimeter.

Mismanaged or orphaned credentials can lead to breaches or unauthorized system manipulation. Robust identity lifecycle management—covering creation, monitoring, usage, and retirement—is essential. Under GDPR and Swedish law, AI systems, like human officers, must operate within defined mandates and leave auditable trails.


Securing automated workflows

Automated reporting and predictive policing pipelines are vulnerable to tampering, data poisoning, or insider threats. Zero-trust architectures, tamper-evident logs, cryptographic validation, and segmented workflows help mitigate these risks. Equally important is maintaining a human-in-the-loop, ensuring oversight, intervention, and ethical accountability in automated decision-making.


Governance and Accountability from day one

Trust in AI-assisted policing depends on governance embedded from design to deployment:

  • Conducting AI impact assessments aligned with GDPR and the EU AI Act.

  • Implementing explainability tools to clarify system reasoning.

  • Establishing independent oversight boards with technical, legal, and civic expertise.

  • Continuous monitoring and documentation of AI behavior throughout its lifecycle.

By prioritizing governance and compliance early, agencies strengthen public trust and operational resilience.


Why this matters for Leaders

The rise of AI and automated systems represents not just a technological shift but an institutional transformation. Law enforcement leaders must:

  • Secure automated systems against misuse.

  • Manage AI and machine identities transparently.

  • Embed compliance and auditability as foundational principles.


Discussing the future at The Grand IT Security 2026

Digital trust will define the legitimacy of law enforcement as the line between human and machine decision-making blurs. The Grand IT Security 2026, held on May 21st at Stockholm Waterfront Congress Centre, will feature dedicated sessions exploring AI, machine identities, and the governance of non-human actors in law enforcement. Leaders will gain insights into securing automated systems, managing AI identities, and embedding compliance from design to deployment.

By building secure, accountable, and transparent AI ecosystems today, agencies can shape the future of lawful, ethical, and trusted public safety.

Share it :
SEE ALL UNIQUE TOPICS

Round Table Discussion

Mattias Wiklund

Regional CIO, Toyota Northern Europe

Moderator

Riccardo Pietri

CISO, Anyfin

Moderator

Jonas Berglund

Security Transformation Associate Director, Accenture

Moderator

As organizations increasingly deploy AI agents and autonomous systems, securing their identities throughout the lifecycle—from onboarding to decommissioning—has become critical. This session explores strategies for enforcing role-based access, automating credential management, and maintaining continuous policy compliance while enabling AI systems to operate efficiently.

  • Role-based access and automated credential lifecycle management.
  • Continuous monitoring for policy compliance.
  • Ensuring secure decommissioning of autonomous systems.
Nazlı Şahin

Director - Security, Risk, and Compliance, Accedo

Moderator

Christian Nehammer

Account Executive, WIZ

Moderator

Joel Norrmarker

Senior Solutions Engineer, WIZ

Moderator

Aladdin Elfares

Account Executive, WIZ

Moderator

Automated workflows and CI/CD pipelines often rely on high-value credentials and secrets that, if compromised, can lead to severe security incidents. This discussion covers practical approaches to securing keys, detecting anomalous activity, and enforcing least-privilege access without creating operational bottlenecks.

  • Detect and respond to anomalous credential usage.
  • Implement least-privilege access policies.
  • Secure CI/CD and AI automation pipelines without slowing innovation.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Surinder Lall

Head of Cyber Governance, Risk and Compliance, DMG Media

Moderator

Marcus Ehrstrand

Senior Solutions Engineer, Okta

Moderator

As generative and predictive AI models are deployed across enterprises, understanding their provenance, training data, and deployment risks is essential. This session provides frameworks for model governance, data protection, and approval workflows to ensure responsible, auditable AI operations.

  • Track model provenance and lineage.
  • Prevent data leakage during training and inference.
  • Approval workflows for production deployment.
Sushil Shenoy

IT Security Specialist, VizRT

Moderator

Thom Langford

EMEA CTO, Rapid 7

Moderator

Operating AI systems in live environments introduces dynamic risks. Learn how to define operational boundaries, integrate human oversight, and set up monitoring and alerting mechanisms that maintain both compliance and agility in high-stakes operations.

  • Define operational boundaries for autonomous agents.
  • Integrate human-in-the-loop review processes.
  • Alert and respond to compliance or behavioral deviations.
Thea Sogenbits

CISO, Estonian Tax and Customs Board

Moderator

Scott Walker

VP of Sales, EMEA, Orca

Moderator

AI agents often interact with sensitive data, making it vital to apply robust data protection strategies. This session explores encryption, tokenization, access governance, and audit trail practices to minimize exposure while enabling AI-driven decision-making.

  • Implement encryption, tokenization, and access controls.
  • Maintain comprehensive audit trails.
  • Reduce exposure through intelligent data governance policies.

Nithin Krishna

Head of Cyber Defense Center, Jeppesen Foreflight

Moderator

Magnus Järnhandske

Chief of Cyber Security Operations, Asurgent

Moderator

Autonomous systems can behave unpredictably, potentially creating self-propagating risks. This discussion covers behavioral anomaly detection, leveraging AI for threat intelligence, and implementing containment and rollback strategies to mitigate rogue AI actions.

  • Behavioral anomaly detection.
  • AI-assisted threat detection.
  • Containment and rollback strategies.
Marius Baczynski

Director of Security Service Sales, Radware

Moderator

Enterprises need to maintain security while avoiding lock-in with specific AI vendors. This session explores open standards, interoperability, and monitoring frameworks that ensure security and governance across multi-vendor AI environments.

  • Open standards and interoperable monitoring frameworks.
  • Cross-platform governance for multi-vendor environments.
  • Maintain security without sacrificing flexibility.
Bernard Helou

Cybersecurity Manager, Schibsted Media

Moderator

AI systems can occasionally act outside intended parameters, creating operational or security incidents. This session addresses detection, escalation, containment, and post-incident analysis to prepare teams for autonomous agent misbehavior.

  • Detection and escalation protocols.
  • Containment and mitigation strategies.
  • Post-incident analysis and lessons learned.

Henrik Tholsby

CISO, Danderyds sjukhus

Moderator

Peter Dahl Inselseth

Major Account Director - Nordics, CATO Network

Moderator

Christian Sahlén

Head of Security & Governance (CISO), TF Bank

Moderator

Organizations must ensure AI operations comply with GDPR, the AI Act, PII, and other regulations. This session explores embedding compliance controls into operational workflows, mapping regulatory requirements to AI systems, and preparing audit-ready evidence.

  • Map regulatory requirements to operational workflows.
  • Embed compliance controls into daily AI operations.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

 

Bojana Stevanovic Medenica

Manager IT & IS, Extenda Retail

Moderator

Louise Lundgren

Sales Director - N.EUR, Synack

Moderator

Static audits are no longer enough. This session explores embedding continuous compliance and assurance into operations, enabling real-time monitoring, cross-team collaboration, and proactive gap resolution.

  • Automated evidence collection and dashboards.
  • Cross-team integration between IT, HR, and risk.
  • Rapid identification and resolution of compliance gaps.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Jan Olsson

Kriminalkommisarie / Police Superintendent, Swedish National Police SC3

Moderator

Johan Frederiksson

AVP Nordics, Igel

Moderator

Hybrid work increases complexity in maintaining compliance. This session focuses on policies, monitoring, and cultural strategies for securing distributed teams without reducing agility.

  • Endpoint and remote access controls.
  • Policy enforcement across multiple locations.
  • Promote a security and compliance-first culture.
Vivek Rao

Information Security Risk Specialist, Entercard Group AB

Moderator

Linda Avad

Chief Information Security Officer, Alecta

Moderator

Staffan Fredriksson

CISO, Regent AB

Moderator

Leaders need measurable insights into organizational resilience. This session covers dashboards, automated alerting, and reporting frameworks for operational and compliance metrics.

  • Dashboards for key resilience indicators.
  • Automated alerts for control failures.
  • Documentation for leadership and regulators.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Helene Neuss

Information Security Strategist, Länsförsäkringar Bank

Moderator

Gamze Zengin

Information Security, Compliance & Risk Officer,
Åhléns Åhléns - Online & Varuhus

Moderator

Skilled cybersecurity professionals are in high demand. This session explores strategies for recruitment, career development, and retention to secure top talent in a competitive market.

  • Employer branding and recruitment strategies.
  • Career development pathways.
  • Retention programs for high-demand skills.
Helana Malm

Head of CSO Office | Deputy Head of Group Security & Cyber Defence, Chair of Women in Security, Swedbank

Moderator

Dzana Dzemidzic

BISO,
Swedbank

Moderator

Teams must be prepared for evolving threats, including AI-driven risks. Learn how to design training programs, simulations, and metrics for skill development.

  • AI security and automation-focused training.
  • Scenario-based simulations and exercises.
  • Skill tracking and competency measurement.
Johanna Parikka Altenstedt

Acting Head of Cybercenter and the Digital Security Unit, RISE

Moderator

Andreas Bergqvist

CSO, BankID

Desirée Winther

Team Lead | Public Sector Sweden, Commvault

Moderator

Collaboration between sectors accelerates threat detection and response. Explore frameworks for intelligence sharing, coordinated response, and evaluating partnerships.

  • Share actionable intelligence securely.
  • Establish coordinated response frameworks.
  • Measure partnership effectiveness.
Florin Chirilas

Local IT Security Officer, Vattenfall

Moderator

Severin Simko

Security Architect, Devoteam

Moderator

Incident response effectiveness relies on preparedness and coordination. This session highlights training, roles, and post-incident analysis to strengthen response capabilities.

  • Cross-functional training programs.
  • Clear escalation paths and role definitions.
  • Post-incident analysis and continuous improvement.
Jörgen Otosson

CISO, BITS DATA

Moderator

Anders Johansson

CISO, Alfa eCare Group

Moderator

Björn Orri Guðmundsson

CEO & Co-Founder, Aftra

Moderator

Human limitations impact security operations. Learn strategies to monitor stress, implement support programs, and build resilience.

  • Monitor workload and stress indicators.
  • Implement well-being and counseling programs.
  • Build resilience into operations.
Teresia Wilsted

ISO, MedMera Bank

Moderator

Oscar Wallenas

Enterprise Account Executive, Elastic

Moderator

International teams require consistent policies and flexible execution. This session covers coordination, communication, and tool centralization for global operations.

  • Align policies globally while empowering local execution.
  • Define communication protocols across time zones.
  • Centralized tools with flexible deployment.

Due to programme updates, this round table is no longer available for registration.

Please choose another available topic from the list.

Javvad Malik

Lead CISO Advisor, KnowBe4

Moderator

Sarbjit Singh

CISO, Mentimeter AB

Moderator

Reljo Saarepera

Programme Director, Estonian Public Procurement Center

Moderator

Effective collaboration depends on streamlined tools and processes. Explore strategies to reduce tool fatigue, enable real-time coordination, and enhance teamwork.

  • Evaluate ticketing, SIEM, and collaboration platforms.
  • Avoid tool fatigue and duplication.
  • Enable real-time coordination and alerting.
Niclas Kjellin

Cybersecurity Expert, Cloud Security Alliance

Moderator

Seamus Lennon

Vice President of Operations for EMEA, ThreatLocker

Moderator

Knowledge sharing strengthens resilience. Learn how to exchange actionable intelligence securely, standardize reporting, and maintain trust across organizations.

  • Threat intelligence and mitigation strategies.
  • Standardized reporting formats for partners.
  • Ensure confidentiality and trust frameworks.
Smeden Svahn

CISO, Adda

Moderator

Trish Almgren

Senior Manager, Product Marketing, Infoblox

Moderator

Aligning security initiatives improves impact and efficiency. This session covers prioritization, coordination, and shared accountability across teams and sectors.

  • Coordinate timelines and goals across teams.
  • Identify overlapping initiatives and redundancies.
  • Establish shared accountability structures.